Improved Generic Attacks Against Hash-Based MACs and HAIFA - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Algorithmica Année : 2017

Improved Generic Attacks Against Hash-Based MACs and HAIFA

Résumé

The security of HMAC (and more general hash-based MACs) against state-recovery and universal forgery attacks was shown to be suboptimal, following a series of results by Leurent et al. and Peyrin et al. These results have shown that such powerful attacks require significantly less than 2 computations, contradicting the common belief (where denotes the internal state size). In this work, we revisit and extend these results, with a focus on concrete hash functions that limit the message length, and apply special iteration modes. We begin by devising the first state-recovery attack on HMAC with a HAIFA hash function (using a block counter in every compression function call), with complexity 2^4l/5. Then, we describe improved tradeoffs between the message length and the complexity of a state-recovery attack on HMAC with a Merkle-Damgård hash function. Consequently, we obtain improved attacks on several HMAC constructions used in practice, in which the hash functions limits the maximal message length (e.g., SHA-1 and SHA-2). Finally, we present the first universal forgery attacks, which can be applied with short message queries to the MAC oracle. In particular, we devise the first universal forgery attacks applicable to SHA-1 and SHA-2. Despite their theoretical interest, our attacks do not seem to threaten the practical security of the analyzed concrete HMAC constructions.
Fichier principal
Vignette du fichier
HMAC-haifa.pdf (551.29 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01407953 , version 1 (02-12-2016)

Identifiants

Citer

Itai Dinur, Gaëtan Leurent. Improved Generic Attacks Against Hash-Based MACs and HAIFA. Algorithmica, 2017, Special Issue: Algorithmic Tools in Cryptography, 79 (4), pp.1161--1195. ⟨10.1007/s00453-016-0236-6⟩. ⟨hal-01407953⟩

Collections

INRIA INRIA2
106 Consultations
194 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More